[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] authorization troubles



It would be helpful to know what the 'full reason' was. try scanning back in the log to the daemon startup banner, then forward until you see the first PERMISSION DIENIED error. the reason indicated there will be much more detailed.

On 7/22/2014 6:31 AM, Pek Daniel wrote:
Hi,

Something is wrong in my authorization rule, and can't figure out what:

SCHEDD.ALLOW_WRITE = *@foo.bar/*.foo.bar

then I get this:
PERMISSION DENIED to condor@xxxxxxx/bla.foo.bar from host
xxx.xxx.xxx.xxx for command 1112 (QMGMT_WRITE_CMD), access level
WRITE: reason: cached result for WRITE; see first case for the full
reason

then I change the rule:
SCHEDD.ALLOW_WRITE = *@*/*.foo.bar # omitting the @foo.bar part

And tadaam, it works.

Can somebody explain why *@*/*.foo.bar matches
condor@xxxxxxx/bla.foo.bar, but *@foo.bar/*.foo.bar doesn't?

Thanks,
Daniel
_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/